Skip to content
CVE PROGRAM SOURCE RECORD2.3 Low

CVE-2024-38858

Cross-site scripting in Robotmk logs view

Description

Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Checkmk GmbH Checkmk

Default version status: unaffected

  • 2.3.0 to < 2.3.0p14affected

References